as far as i know that is the best way to do it. the only other option is to set another password on the server, and do an enterprise activation ( if using version 4.0 or higher ).

I did that yesterday... You can also go into the users properties on the bes server and then plug in the device to the bes server and it will assign the PIN to the user and do activation through the wire, little bit quicker, less data usage.